Flox: Content spoofing through Referel header

I found content spoofing/ text injection through referel header Steps to reproduce: whenever you came to this page https://flox.io/404/ You'll see an error message like 404: Baaah! Nothing existed there, so now you’re here. You appear to be a traveller from a distant land. From googling I found a...